Vulnerabilities

TI-2026-41791 CVE-2026-58036 · GHSA-qf2r-x8qv-xrwx

Users API leaks whether privileged users have their user groups disabled for lack of 2FA

LOW 11

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.0032 Published 2026-07-01 Fixed in 1.46.0 CWE-200

TI-2026-41786 CVE-2026-58031 · GHSA-f942-cxv6-p9mx

LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0N/A 0.0 Network Low privileges User interaction EPSS 0.00267 Published 2026-07-01 Fixed in 1.46.0 CWE-79

TI-2026-41790 CVE-2026-58035 · GHSA-gvg3-mcqq-v953

LOW 3

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0N/A 0.0 Network High privileges User interaction EPSS 0.00287 Published 2026-07-01 Fixed in 1.46.0 CWE-79